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CENTRAL FAX CENTER 

MAR lh 2008 

IN THE CLAIMS 

No amendments are made to the claims, which are reproduced for the Examiner's convenience: 

1 . (PREVIOUSLY PRESENTED) A method of storing program material in a media 
storage device communicatively coupled to a receiver for subsequent replay^ comprising the steps o£ 

(a) accepting encrypted access control information and the program material encrypted 
according to a first encryption key in the receiver, the access control information including a first 
encryption key and control data; 

(b) decrypting the received access control information in a conditional access module 
releasably coupleable with ihe receiver to produce the first encryption key; 

(c) decrypting the program material in the receiver using the first encryption key; 

(d) re-encrypting the program material according to a second encryption key; 

(e) encrypting ihe second encryption key in the conditional access module according to 
a third encryption key to produce a fourth encryption key; and 

(i) providing the re-encrypted program material and the fourth encryption key for 
storage external to the conditional access module. 

2. (ORIGINAL) The method of claim 1, wherein the encrypted access control 
information further comprises temporally- variant control data, and the method further comprises 
the steps of: 

decrypting the received access control information to produce the temporally-variant control 
data; and 

modifying the temporally variant control data to generate temporally-invariant control data. 

3. (CANCELED) 

4. (PREVIOUSLY PRESENTED) The method of claim 1, wherein the conditional 
access module is implemented on a smattcard 

5. (ORIGINAL) The method of claim 1, wherein the access control information 
further comprises metadata describing at least one right for the program material 
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6. (ORIGINAL) The method of claim 5, further comprising the step of: 
generating the second encryption key at least in pare from the metadata. 

7. (ORIGINAL) The method of claim 1, wherein steps (b)-(f) are performed in 
response to a pre-buy message, 

8* (ORIGINAL) The method of claim 7, wherein the access control information 
further comprises metadata describing at least one right for the program material, and the method 
further comprises the step of: 

generating replay right data from the metadata. 

9. (ORIGINAL) The method of claim 8, wherein the replay right data is further 
generated from pre-buy data. 

10. (ORIGINAL) The method of claim 1, further comprising the steps of: 
retrieving the stored re-encrypted program material and the fourth encryption key; 
decrypting the foumh encryption key using the third encryption key to produce the second 

encryption key; and 

decrypting the re-encrypted material using the second encryption key. 

11. (ORIGINAL) The method of claim 10, wherein the step of decrypting the fourth 
encryption key using the third encryption key to produce the second encryption key is performed in 
response to a subscriber request to access the program material. 
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12. (ORIGINAL) The method of r\*m l \ 9 wherein die access control information 
further comprises metadata describing at least one right for the program material^ the subscriber 
request to access the program material comprises buy data, and the method further comprises the 
steps of: 

generating replay right data from the metadata; 
accepting the buy data; 

comparing the buy data with the replay right data; and 

decrypting the fourth encryption key using the third encryption key to produce the second 
encryption key according to the comparison between the buy data and the replay right data. 

13. (ORIGINAL) The method of claim 12, wherein steps (b)-(f) aie performed in 
response to a pre-buy message, and wherein: 

the second encryption key and the third encryption key are stored in a smartcard, and the 
replay right data is generated from the metadata and the pre-buy message in the smartcard; and 

the steps of accepting the buy data, comparing the buy data with the replay right data, and 
decrypting the fourth encryption key using the third encryption key to produce the second 
encryption key according to the comparison between the buy data and the replay right data are 
performed in the smartcard. 

14. (ORIGINAL) The method of claim 1, wherein the re-encrypted program material 
and the fourth encryption key are stored on a media storage device* 

15. (ORIGINAL) The method of claim 1, wherein the control data is temporally- 
variant. 

16. (ORIGINAL) TheroetiodofclaimlS^wheremmetem 
associates an expiration time with the program material. 
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17. (PREVIOUSLY PRESENTED) An apparatus for storing program material 
encrypted according to a first encryption key for replay > comprising: 

a conditional access module, for accepting encrypted access control information including 
the first encryption key and temporally-variant control data, the control access module comprising: 

a first decryption module, for decrypting the access control information to produce 
the first encryption key; 

a first encryption module, for encrypting a second encryption key with a third 
encryption key to produce a fourth encryption key; and 

a second decryption module for decrypting the fourth encryption key to produce the 
second encryption key; 

wherein the conditional access module is releasably communicatively coupled to a tuner, the 
tuner to enable reception of the encrypted access control information and the program material 
encrypted according to a first encryption key, the tuner comprising: 

a third decrjption module, for decrypting the program material using the first 
encryption key produced by the conditional access module; 

a second encryption module, for re-encrypting the decrypted program material 
according to the second encryption key; and 

a fourth decryption module, for decrypting the re-encrypted program material 
according to the second enc-jyption key, 

18. (CANCELED) 

19. (PREVIOUSLY PRESENTED) Hie apparatus of claim 17, wherein the conditional 
access module further comprises: 

a pre-buy module, for controlling the first decryption module. 

20. (PREVIOUSLY PRESENTED) The apparatus of claim 1 7, wherein the access 
control information further comprises metadata describing at least one right for the program 
material. 
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2 1 . (PREVIOUSLY PRESENTED) The apparatus of claim 20, wherein: 

the conditional access module comprises a pre-buy module for controlling the first 
decryption module, and for generating replay right data from the metadata. 

22. (ORIGINAL) The apparatus of claim 21 , further comprising a buy module, 
communicatively coupled to die pre-buy module. 

23. (ORIGINAL) The apparatus of claim 22, wherein the buy module comprises: 

a purchase module for accepting buy data and comparing the buy data and the replay right 
data from the pre-buy module; and 

a control module for controlling the second decryption module based on the comparison 
between the buy data and the replay right data* 

24. (ORIGINAL) The apparatus of claim 23, further comprising a billing module, for 
recording the buy data. 

25. (ORIGINAL) The apparatus of claim 1 8, wherein the second encryption key is 
stored in the conditional access module. 

26. (ORIGINAL) The apparatus of claim 1 8, wherein the third encryption key is stored 
in the conditional access module. 

27. (ORIGINAL) The apparatus of claim 17, wherein the conditional access module is 
releaseably communicanVe coupleable to; 

a tuner for receiving the encrypted access control iriforrnation and the program material 
encrypted according to a first encryption key; 

a third decryption module, for decrypting the program material using the first encryption key 
from the conditional access module 

a second encryption module, for re-enaypting the decrypted program material according to 
the key; and 

a media storage device. 
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28. (PREVIOUSLY PRESENTED) An apparatus for storing program material in a 
media storage device communicatively coupled to a receiver for replay, comprising: 

a receiver, for accepting encrypted access control information and the program material 
encrypted according to a £m encryption key, the access control information including a first 
encryption key and control data; 

a conditional access module, releasably coupleable with the receiver for decrypting the 
received access control information to produce the first encryption key; 

means for decrypting the program material using the first encryption key; 

means for re-encryj iting the program material using according to a second encryption key; 

means, in the conditional access module, for encrypting the second encryption key according 
to a third encryption key to produce a fourth encryption key; and 

means for providing the re-encrypted progtam material and a fourth encryption key for 

storage. 

29. (ORIGINAL) The apparatus of claim 28, wherein the encrypted access control 
information further comprises temporally-variant control data, and the apparatus further comprises: 

means for decrypting the received access control information to produce the temporally- 
variant control data; and 

means for modifying the temporally variant control data to generate temporally-invariant 
control data. 

30. (CANCELED) 

31 . (PREVIOUSLY PRESENTED) The apparatus of claim 28, wherein the conditional 
access module is implemented on a s mar tear d. 

32. (ORIGINAL) The apparatus of claim 28, wherein the access control information 
further comprises metadata describing at least one right for the program material. 

33. (ORIGINAL) The apparatus of claim 32, further comprising: 

means for generating the second encryption key at least in part from the metadata. 
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34. (ORIGINAL) The apparatus of claim 32, further comprising: 
means for generating repky right data from the metadata. 

35. (ORIGINAL) The apparatus of claim 34, wherein the means for generating the 
repky right data further generates replay right data from pre-buy data- 

36. (PREVIOUSLY PRESENTED) The apparatus of claim 28, further comprising: 
means for retrieving the stored re-encrypted program material and the fourth encryption key; 
means for decrypting the fourth encryption key using the third encryption key to produce 

the second encryption key; and 

means for decrypting the re-encrypted material using the second encryption key. 

37. (ORIGINAL) The apparatus of claim 36, wherein the means for decrypting the 
fourth encryption key using the third encryption key to produce the second encryption key is 
performed in response to a subscriber request to access the program material. 

38. (ORIGINAL) The apparatus of claim 37, wherein the access control information 
further comprises metadata describing at least one right for the program material, the subscriber 
request to access the program material comprises buy data, and the apparatus further comprises: 

means for generating replay right data from the metadata; 
means for accepting the buy data; 

means for comparing the buy data with the replay right data; and 

means for decrypting die fourth encryption key using the third encryption key to produce 
the second encryption key according to the comparison between the buy data and the replay right 
data. 
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39. (ORIGINAL) The apparatus of claim 38, wherein: 

the second encryption key and the third encryption key axe stored in a smartcard, and the 
replay right data is generated from the metadata and the pre-buy message in the smartcaxd; and 

the means for accepting the buy data, means for comparing the buy data with the replay 
right data, and means for decrypting the fourth encryption key using the third encryption key to 
produce the second encryption key according to the comparison between the buy data and the 
replay right data is implemented in the smartcaxd. 

40. (ORIGINAL) The apparatus of claim 28, wherein the re-encrypted program 
material and the fourth encryption key are stored on a media storage device, 

41. (ORIGINAL) The apparatus of claim 28, whetein the control data is temporally- 
variant. 

42. (ORIGINAL) The apparatus of claim 41, wherein the temporally-variant control 
data associates an expiration time with the program material. 

43. (PREVIOUSLY PRESENTED) The method of claim 1 3 further comprising the 
step of generating the second encryption key in the conditional access module. 

44. (PREVIOUSLY PRESENTED) The method of claim 1, wherein the access control 
information further comprises metadata and the method further comprises the step of generating 
the second encryption key at least in part from the metadata, 

45. (PREVIOUSLY PRESENTED) The method of claim 1, further comprising the 

Step of: 

augmenting the second encryption key with at least a portion of the metadata before 
encrypting the second encryption key in the conditional access module. 
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46. (PREVIOUSLY PRESENTED) The method of claim 1, wherein the access control 
information further comprises metadata describing at least one right for the program material, and 
the method further comprises the step of: 

augmenting the second encryption key with at least a portion of the metadata before 
encrypting the second encryption key in the conditional access module, 

47. (PREVIOUSLY PRESENTED) The apparatus of claim 20, wherein the conditional 
access module generates the second encryption key at least in pare from the metadata. 

48. (PREVIOUSLY PRESENTED) The apparatus of claim 17, wherein the access 
control information further comprises metadata and the conditional access module generates the 
second encryption key at least in part from the metadata. 

49. (PREVIOUSLY PRESENTED) The apparatus of claim 20, wherein the conditional 
access module augments the second encryption key with at least a portion of the metadata before 
encrypting the second encryption key in the conditional access module. 

50. (PREVIOUSLY PRESENTED) The apparatus of claim 17, wherein the access 
control information further comprises metadata, and wherein the conditional access module 
augments the second encryption key with at least a portion of the metadata before encrypting the 
second encryption key in the conditional access module. 

51. (CANCELED) 

52. (PREVIOUSLY PRESENTED) The method of claim 1, wherein the second 
encryption key is stored in the conditional access module. 

53. (PREVIOUSLY PRESENTED) The apparatus of claim 28, wherein the second 
encryption key is stored in the conditional access module. 
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